Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
File: jt9sKtes7K0Gbh93_gWSLwFpFTY.mft (raw, json)
Hash identifier: ORix8meQV/bdbg/EOy7tbDALv64R4tueRVPS4u+6Fk8=
Subject key identifier: 93:A8:C5:5E:A8:9A:53:4C:6F:08:A3:24:12:69:43:90:D5:3D:AA:E6
Authority key identifier: 8E:DF:6C:2A:D7:AC:EC:AD:06:6E:1F:77:FE:05:92:2F:01:69:15:36
Certificate issuer: /CN=8edf6c2ad7acecad066e1f77fe05922f01691536
Certificate serial: 0198D4A815EE08EFB06792EDFBE1B63B17BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
Manifest number: 068A
Signing time: Sat 23 Aug 2025 02:00:41 +0000
Manifest this update: Sat 23 Aug 2025 02:00:41 +0000
Manifest next update: Sun 24 Aug 2025 02:00:41 +0000
Files and hashes: 1: LZnMbOvKNCeS9warD4gVCngTQgc.roa (hash: 6Cg/OSuVm718gl/BiJrXMhTNmjh+ffJ7x+FKxzJQO0A=)
2: jt9sKtes7K0Gbh93_gWSLwFpFTY.crl (hash: Up7HL6Znb7iZSe6bmcWruKCoewiVGroTMgyB+gC/H8Y=)
3: yl9TGfZBXnKybJW81dLesyL85jw.roa (hash: 5T9nUKakC/d5Fj82Q3FOurA0Y8gDP1/Vr4z0jWpM3OA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:15:ee:08:ef:b0:67:92:ed:fb:e1:b6:3b:17:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8edf6c2ad7acecad066e1f77fe05922f01691536
Validity
Not Before: Aug 23 02:00:41 2025 GMT
Not After : Aug 24 02:00:41 2025 GMT
Subject: CN=93a8c55ea89a534c6f08a32412694390d53daae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5c:62:6d:a8:bf:8c:ea:92:a5:ff:3b:cc:12:
8f:06:d7:95:45:dd:e8:f5:b5:e7:50:57:0c:59:e9:
1d:d7:da:0f:a8:da:a4:77:9e:0a:53:55:f4:93:a5:
94:8a:e1:53:98:e2:48:cb:f8:8a:cf:c3:c6:60:ed:
e9:e3:4c:ec:17:74:f4:c3:84:62:c3:67:39:91:bf:
91:e0:c3:9e:bc:e9:64:0b:a6:77:a0:2e:2f:91:62:
dc:9a:3c:a3:6e:8d:ce:38:81:3f:a1:0c:7f:be:7e:
b4:86:6d:4e:f0:e0:79:4c:95:8d:63:cd:e1:2e:1d:
f6:d6:05:cc:ac:e5:60:4d:5a:3c:c7:7f:e4:57:bf:
75:cb:26:bc:a9:3f:75:5c:e7:08:5a:8c:3f:00:20:
dc:5d:3f:ed:31:03:c1:69:51:90:4c:71:c9:c9:21:
79:16:b8:31:80:91:4f:9f:05:b2:14:2a:39:9a:da:
c1:c7:7c:bb:f6:98:10:9f:0a:96:31:35:fa:98:7b:
f6:2c:c7:18:36:b4:0c:76:70:eb:48:65:00:d7:04:
4f:ff:6f:e1:3f:90:7e:3d:b5:44:bd:d8:a1:1b:30:
92:44:5d:0c:30:86:b3:cd:51:54:9b:26:54:ca:14:
9f:5b:6c:b3:92:f9:3a:c3:09:d5:e8:a8:fd:78:bc:
a6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A8:C5:5E:A8:9A:53:4C:6F:08:A3:24:12:69:43:90:D5:3D:AA:E6
X509v3 Authority Key Identifier:
keyid:8E:DF:6C:2A:D7:AC:EC:AD:06:6E:1F:77:FE:05:92:2F:01:69:15:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b6:e9:f1:df:00:47:45:4c:d2:f9:f3:3f:e4:29:29:4f:78:
1c:b8:28:88:e6:78:d6:eb:27:b7:82:ad:93:70:46:f5:03:06:
80:79:bf:ae:e2:3f:d5:91:6d:ef:00:dc:3d:b8:0b:5c:cd:13:
8f:20:37:2d:a6:8a:f4:6b:e0:28:62:c1:82:a1:b9:c7:53:42:
e9:ff:80:7e:6a:c3:17:91:6e:70:7d:bf:1a:86:61:8f:a2:a1:
a0:88:df:79:d2:6c:67:06:99:39:c8:3f:09:1b:ad:8d:6f:68:
2a:d0:68:9a:e3:5c:90:96:b9:f3:b4:79:9c:2e:fb:6f:1a:20:
2c:12:36:2f:a3:f3:7e:47:ad:cb:43:39:fb:bc:0e:fa:40:55:
ce:06:8c:e8:c3:01:de:06:da:f9:bf:47:ca:56:04:a0:58:d2:
96:4c:79:3c:7f:a8:60:b0:b6:45:ea:cd:79:d9:5d:20:41:1f:
ce:74:74:c9:59:02:31:67:bd:d6:62:df:10:f1:dc:8c:18:c3:
60:d0:5f:b0:87:90:b8:27:8e:d8:eb:e2:de:10:8c:30:cf:25:
6d:fc:be:f7:5d:40:4a:42:87:29:08:33:4f:66:82:78:58:be:
2f:0a:a7:14:4c:f3:90:be:16:df:d3:b5:64:24:46:80:11:28:
6b:91:4f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:13 2025 by rpki-client